> ## Documentation Index
> Fetch the complete documentation index at: https://ngrok.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure Okta Single Sign-On (SSO) Using OpenID Connect (OIDC)

> Configure Okta single sign-on (SSO) with OpenID Connect (OIDC) to sign in to the ngrok dashboard.

This guide explains how to use Okta as an identity provider for single sign-on (SSO) into the ngrok dashboard, using OpenID Connect (OIDC). If you want to use SAML instead, see [Configure Okta Single Sign-On (SSO)](./okta-dashboard-sso-saml). It does not cover configuring an ngrok endpoint so that your [application users can log in using Okta](../endpoint-sso/okta-sso-oidc).

## What you'll need

* Admin access to create new applications in Okta.
* Admin access to edit your ngrok account settings.
* An [ngrok Pay-as-you-go account](https://ngrok.com/pricing), with the [SSO/RBAC add-on](https://ngrok.com/pricing#identity-and-acces)

## 1. Create a new OIDC app integration in Okta

* From the **Applications** menu, click **Create App Integration**.
* Select **OIDC - OpenID Connect**, then click **Next**.
* Select **Web Application**, then click **Next**.
* Give your app a name, then click **Next**.
* Under **Sign-in redirect URIs**, enter `https://idp.ngrok.com/oauth2/callback`.
* Click **Save**.
* On the **Assignments** tab, assign the users or groups that need dashboard access.
* On the **General** tab, copy the **Client ID** and **Client Secret**. You'll need these values for the ngrok side.

## 2. Configure SSO for your ngrok account

* Log into your ngrok dashboard and go to **Settings > Account**.
* Click **+ New Identity Provider**, then select **New OpenID Connect Provider**.
* Set **Issuer URL** to your Okta org URL, for example `https://{yourOktaDomain}.okta.com`.
* Enter the **Client ID** and **Client Secret** from Okta.
* In the **Scopes** field, add the required `email` scope. You can optionally add the `profile` scope too to show a user's name instead of their email address.
* Click **Save**.

You can now log in to your ngrok account by authenticating with Okta.

By default, your ngrok account allows users to log in with their existing credentials and through Okta ("Mixed Mode"). After you confirm the integration works, turn on **SSO Enforced** in the ngrok dashboard to require all new users to log in with Okta SSO.